WMI Attacks - What You Don't Know CAN Hurt You

Chad Tilbury

Monday, August 6th, 7:15pm - 9:15pm

In the spectrum of things that keep enterprise security teams up at night, WMI should be heading to the forefront. Advanced adversaries are increasingly adding WMI-based attacks to their repertoires, and most teams are woefully unprepared to face this new threat.

You need to understand what you are up against, and attendees will leave with a comprehensive overview of the state of WMI hacking, including real-world examples of nation state and criminal actor tradecraft. Once you have a strong understanding of the threat, Chad will pivot to defense and discuss detection tools and analysis techniques.

While parts of this presentation will necessarily be technical, even those less technical will leave with a greater understanding of the threat and a checklist of actionable steps to better increase their organization's security posture.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.

Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.